CVE-2021-32857: Agentejo Cockpit

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.

Affected products

• Agentejo Cockpit: up to and including 0.12.2

Published 2023-02-21. Last modified 2026-06-17.